Efficient IP-based Security Enablers for Internet
Date Issued
1999-07-31
Date
1999-07-31
Author(s)
DOI
882213E002066
Abstract
With the fast growth of Internet and
electronic commerce, how to provide a
secure communication environment on the
Internet has become an urgent issue.
However, Most of the network security
solutions place their security mechanisms at
the application layer. Therefore, they must
modify each application individually to
accomplish the purposes of security and
authentication. This is very inconvenient and
requires much time and work. In this project,
we propose the concept of IP-based security
enablers to be an efficient Internet security
solution. The concept of IP-based security
enablers is to provide a flexible and
extensible network security interface for
network programs. Network programs can
enjoy network security services such as
authentication, confidentiality, access control
immediately without any modification.
The system architecture of the
proposed IP-based security enablers contains three components: an authentication and key
management component, a network protocol
encryption component, and a security policy
component. The implementation is carried
out on FreeBSD 2.2.8 operation system.
IP-based security enablers provide a
robust network security infrastructure and
various security services to users. It has
advantages such as: does not need PKI,
suitable for Local Area Network (LAN) and
Intranet of an enterprise, easy to install, and
suitable for low-computation power mobile
computing devices. In addition, our system
can accept tickets issued by Kerberos Key
Distribution Center (KDC); therefore, it is
compatible with the widely used Kerberos
authentication service.
Subjects
Network Security
Internet
Electronic Commerce
IP Security
Authentication
Key Management
Privacy
Security Enablers
Publisher
臺北市：國立臺灣大學電機工程學系暨研究所
Type
report
File(s)![Thumbnail Image]()
Loading...
Name
882213E002066.pdf
Size
132.69 KB
Format
Adobe PDF
Checksum
(MD5):2e3ff70f15180911230155218b87b23b